Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/9BtoatP68EdJygtSXhmGJ5APHRts9X45DMGJJSYWd8SL/0/CFC886EC4D9F2C4A31EE53AC15714BD4E7028752.mft
File:                     CFC886EC4D9F2C4A31EE53AC15714BD4E7028752.mft (raw, json)
Hash identifier:          EbdygHUPRJhth+9rBi+dVGDAinicaXBbI2PtgGhEckA=
Subject key identifier:   1D:95:3B:AF:49:92:BA:33:E9:4D:64:70:5B:24:EA:F2:39:78:36:5D
Authority key identifier: CF:C8:86:EC:4D:9F:2C:4A:31:EE:53:AC:15:71:4B:D4:E7:02:87:52
Certificate issuer:       /CN=CFC886EC4D9F2C4A31EE53AC15714BD4E7028752
Certificate serial:       540AA79CF2F1051F60A985B4927A1063A04E294D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CFC886EC4D9F2C4A31EE53AC15714BD4E7028752.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9BtoatP68EdJygtSXhmGJ5APHRts9X45DMGJJSYWd8SL/0/CFC886EC4D9F2C4A31EE53AC15714BD4E7028752.mft
Manifest number:          BA
Signing time:             Mon 20 Oct 2025 04:22:06 +0000
Manifest this update:     Mon 20 Oct 2025 04:17:06 +0000
Manifest next update:     Tue 21 Oct 2025 06:09:06 +0000
Files and hashes:         1: 323830343a326565633a3a2f33322d3438203d3e20323634383631.roa (hash: Pmd2oHMVN3RO65spy8KBeP91n4F+2uJwEIYTdWohKkU=)
                          2: CFC886EC4D9F2C4A31EE53AC15714BD4E7028752.crl (hash: 3hQLqHXu2K/T7T55RuIr/CMYLFiiCkm9tPL+c/s9CbM=)
                          3: 3136382e3230352e35322e302f32322d3234203d3e20323634383631.roa (hash: sszuikLyJCfK/q7HZ7Bf5gDMhQQ8QEhvjEDczDvmx9s=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9BtoatP68EdJygtSXhmGJ5APHRts9X45DMGJJSYWd8SL/0/CFC886EC4D9F2C4A31EE53AC15714BD4E7028752.crl
                          rsync://rpki-repo.registro.br/repo/9BtoatP68EdJygtSXhmGJ5APHRts9X45DMGJJSYWd8SL/0/CFC886EC4D9F2C4A31EE53AC15714BD4E7028752.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CFC886EC4D9F2C4A31EE53AC15714BD4E7028752.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 06:09:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:0a:a7:9c:f2:f1:05:1f:60:a9:85:b4:92:7a:10:63:a0:4e:29:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CFC886EC4D9F2C4A31EE53AC15714BD4E7028752
        Validity
            Not Before: Oct 20 04:17:06 2025 GMT
            Not After : Oct 21 06:09:06 2025 GMT
        Subject: CN=1D953BAF4992BA33E94D64705B24EAF23978365D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:ef:62:53:2d:4d:ca:65:00:5d:33:8a:c1:77:
                    df:f7:2a:e6:7c:44:cc:d7:30:0d:4f:61:91:5a:72:
                    2a:a8:a4:61:4d:3a:74:5e:06:5f:b7:7d:1e:3e:3d:
                    c5:fe:b6:c9:33:c4:65:7a:b2:68:98:35:97:a4:cc:
                    1b:ed:f3:46:a0:a4:c9:a4:87:14:17:20:8e:c5:5d:
                    3d:c2:0d:26:5a:f3:e1:34:15:db:cf:cc:49:72:64:
                    05:db:80:41:82:5e:bf:d1:ce:31:bc:9c:5f:c6:71:
                    a5:ec:0c:38:a8:26:6c:7e:65:0e:76:44:a7:89:ff:
                    60:47:2d:80:00:6e:e1:9a:c2:b7:1e:eb:a3:8e:99:
                    09:0b:20:ba:a9:43:f1:b8:8a:15:7c:3e:80:94:92:
                    41:7e:8b:b1:f5:2c:ac:77:ec:4f:ed:dd:90:59:50:
                    4d:66:a1:b4:51:9d:0f:09:2f:eb:24:82:06:04:3b:
                    53:56:7a:f2:25:1d:8c:8d:99:06:80:4d:2f:b3:cf:
                    c7:9c:2b:96:1d:cf:dd:89:9e:03:ce:20:23:4c:76:
                    e4:89:67:a5:d1:44:e2:9d:97:28:01:d4:94:de:b8:
                    65:5f:b2:1c:2e:2b:6e:2f:b6:34:98:5f:a3:2b:5c:
                    24:de:0a:64:7d:5b:00:fd:e7:84:d9:1b:1d:19:bd:
                    e5:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:95:3B:AF:49:92:BA:33:E9:4D:64:70:5B:24:EA:F2:39:78:36:5D
            X509v3 Authority Key Identifier:
                keyid:CF:C8:86:EC:4D:9F:2C:4A:31:EE:53:AC:15:71:4B:D4:E7:02:87:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9BtoatP68EdJygtSXhmGJ5APHRts9X45DMGJJSYWd8SL/0/CFC886EC4D9F2C4A31EE53AC15714BD4E7028752.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CFC886EC4D9F2C4A31EE53AC15714BD4E7028752.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9BtoatP68EdJygtSXhmGJ5APHRts9X45DMGJJSYWd8SL/0/CFC886EC4D9F2C4A31EE53AC15714BD4E7028752.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:55:6d:0a:78:8a:c9:05:20:77:92:3a:9d:6c:76:ed:d0:40:
         d7:c9:d2:80:71:e7:7e:46:e8:27:69:e6:87:7c:c5:3b:ef:7e:
         65:48:8d:62:84:03:79:06:0e:cf:35:60:ff:67:db:2c:f4:c7:
         c7:1a:67:76:93:5c:af:49:bf:7f:75:d4:82:64:1f:0e:4a:80:
         54:a5:94:35:89:43:c6:a3:5d:3b:70:3c:8b:77:a8:a4:3a:66:
         eb:dc:c1:d0:f0:58:b6:54:28:39:d6:58:b3:88:64:09:3d:92:
         bf:9c:f8:ae:f3:7c:c3:ee:af:69:e6:24:34:77:9f:2a:81:20:
         28:70:84:ef:21:b7:c5:7b:b1:b3:93:54:87:40:e7:5a:89:5c:
         34:fa:ce:77:ab:4b:20:34:ba:7f:9e:55:8e:bd:a4:da:65:ee:
         3b:2d:7d:76:80:04:57:2b:b4:a4:19:80:e6:1b:3a:18:85:3a:
         e7:94:34:a2:37:74:f8:1c:a7:57:fb:94:b4:49:91:c3:fb:be:
         d6:6c:d9:e8:fe:e5:66:bc:d9:d5:f6:9e:52:63:b5:8c:e3:9d:
         29:89:2b:71:35:37:28:af:35:0a:f1:66:66:aa:09:a5:7b:dd:
         62:ad:19:2d:e0:79:88:49:7f:a7:84:82:1a:bc:cc:f9:c8:62:
         1c:67:cc:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 12:11:23 2025 by rpki-client